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Method of entry 
Breakpoint hits 


Debug TAP or 
software (CP14) 


How to enter? 

Program breakpoint register and/or 
context-ID register and comparisons 
succeed with Instruction Address and/or 
CP15 Context ID ( 2 ). 


Entry mode 
Halt/monitor 

(V 


Software breakpoint 
instruction 


Put a BKPT instruction into scan 
chain 4 (Instruction Transfer 
Register) through Debug TAP or 
Use BKPT instruction directly in 
the code. 


BKPT instruction must reach execution 
stage. 


Halt/monitor 


Vector trap breakpoint 


Debug TAP 


Program vector trap register and 
address matches. 


Halt/monitor 


Watchpoint hits 


Debug TAP 
or software (CP14) 


Program watchpoint register and/or 
context-ID register and comparisons 
succeed with Instruction Address and/or 
CP 15 Context ID ( 2 ). 


Halt/monitor 

( 1 > 


Internal debug request 


Debug TAP 


Halt instruction has been scanned in. 


Halt 


External debug request 




| EDBGRQ input pin is asserted. 


Halt 



(')• In monitor mode, breakpoints and watchpoints cannot be data-dependent. 

( 2 ): The cores have support for thread-aware breakpoints and watchpoints,,^ puXfirfeo^W to enable secure 
debug on some particular threads. 
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secure world only. 
1 ; debug in se-jure 
world and non- 
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In functional mode or debug monitor mode: R/W by 
using MRC/MtR instruction (tr 14) (only in secure 

supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN=1 


no 


Secure trace 
enable bit 


0: ETM is enabled 
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world only. 
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world 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN= I 


no 
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bit 


0: debug is not 
possible in secure 
user mode 
1 : debug is 
possible in secure 
user mode 
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In functional mode or debug monitor mode: R/W by 
using MRC/MCR instruction (CP 14) (only in secure 
supervisor mode) 

In Debug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSDAEN^l 


no 
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enable bit 


0: debug is not 
possible for a 
particular thread 
1 : debug is 
possible for a 
particular thread 
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In functional mode or debug monitor mode: R/W by 
using iviKt^/JviOK instruction \y.r x^) (only in secure 
supervisor mode) 

InDebug halt mode: No access - MCR/MRC 
instructions have any effect. 

(R/W by programming the ICE by the JTAG (scanl) 
if JSD AEN= 1 


no 
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Secure debug enable 
bit 


Secure user-mode 
debug enable bit 


Secure thread-aware 
debug enable bit 


meaning 


0 


X 


X 


No intrusive debug in entire secure world is possible. 
Any debug request, breakpoints, watchpoints, and other 
mechanism to enter debug state are ignored in entire 
secure world. 


1 I 


0 


X 


Debug in entire secure world is possible 


1 


i 


0 


Debug in secure user-mode only. Any debug request, 
breakpoints, watchpoints, and other mechanism to enter 
debug state are taken into account in user mode only. 
(Breakpoints and watchpoints linked or not to a thread 
ID are taken into account). Access in debug is restricted 
to what secure user can have access to. 


1 


i 


1 


Debug is possible only in some particular threads. In 
that case only thread-aware breakpoints and 
watchpoints linked to a thread ID are taken into account 
to enter debug state. Each thread can moreover debug 
its own code, and only its own code. 



Figure <f\f* 



CP14 bits in Debug and Status Control register 


meaning 


Secure trace enable 
bit 


Secure user-mode 
debug enable bit 


Secure thread-aware 
debug enable bit 
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No observable debug in entire secure world is possible. 
Trace module (ETM) must not trace internal core 
activity. 
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Trace in entire secure world is possible 
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i ■; 




Trace is possible when the core is in secure user-mode 
only. 
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Trace is possible only when the core is executing some 
particular threads in secure user mode. Particular 
hardware must be dedicated for this, or re-use 
breakpoint register pair: Context ID match must enable 
trace instead of entering debug state. 
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Disabled for secure data abort and 
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External debug request 
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CQ Jefc. mCdfWlhon or l vector trap register, l 

(2) Note that when external or internal debug request is asserted, the core enters halt mode and not monitor mode. 
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( l ) As substitution of BKPT instruction in secure world from non-secure world is not possible, non-secure abort 
must handle the violation. 
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